inspirum/xml-symfony

Release historycaution

The package has only three releases since August 2022, with a median interval of about 660 days and one release in the last 12 months. The latest release is recent enough to show the project is not abandoned, but the cadence is slow.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although a release was published recently, the lack of continuing commit activity weakens confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no dedicated security policy, despite the README providing a security contact. The contact helps compensate for the missing formal process, but vulnerability-reporting guidance is still limited.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings. However, all three action references are unpinned, leaving avoidable build reproducibility and action-supply-chain exposure.